How to start a private blood test clinic in the UK

In England, a clinic that takes blood and sends it to a laboratory for analysis is carrying on a regulated activity, so it must register with the Care Quality Commission before it sees patients. Beyond registration, you'll need a laboratory partner, trained staff, safe sharps and waste handling, insurance, and the data protection basics for health data.

Checked
By
Drawn, made by Hizmedia
Reading time
9 min read
Sources
11 sources cited

In short

  • Taking blood that's sent to a lab is the CQC regulated activity "diagnostic and screening procedures" in England.[1]
  • Scotland, Wales and Northern Ireland have their own regulators: HIS, HIW and RQIA.[2][3][4]
  • Choose a laboratory accredited to ISO 15189, which UKAS assesses in the UK.[5]
  • Offer staff hepatitis B vaccination, follow the Sharps Regulations, and use an authorised waste carrier.[6][7][8]
  • Employers' liability insurance is compulsory once you employ anyone.[9]
  • Pay the ICO fee, write a privacy notice, and assess the risks of handling health data.[10][11]

Do I need to register with the CQC?

In England, yes, if you take blood and send it to a laboratory for analysis. The Care Quality Commission regulates "diagnostic and screening procedures", and its guidance covers removing tissue, cells or fluids from the body to diagnose or monitor a condition, which includes taking blood for a lab to test.[1]

The CQC excludes some low-risk tests, such as a finger-prick or venous blood test where the sample isn't sent to a laboratory. And if a provider is already registered for another regulated activity, the CQC treats some of these low-risk procedures as part of that registration.[1]

You can't carry on a regulated activity until you're registered for it, so apply well before you plan to open.

What about Scotland, Wales and Northern Ireland?

Healthcare is regulated separately in each nation. In Scotland, independent clinics are regulated by Healthcare Improvement Scotland, and whether you need to register depends on who provides the service.[2] In Wales the regulator is Healthcare Inspectorate Wales[3], and in Northern Ireland the Regulation and Quality Improvement Authority.[4] Check with the regulator where you'll work before you open.

Which laboratory will analyse my samples?

Most private clinics don't analyse blood themselves: they send samples to a partner laboratory. Look for a lab accredited to ISO 15189, the international standard for quality and competence in medical laboratories, which UKAS assesses in the UK.[5]

Before you open, agree with the lab:

  • which tests it runs, and which tube types and volumes each one needs,
  • how samples reach it, how they're packed, and how quickly,
  • how long results take, and how reports come back to you.

Who can take blood?

Phlebotomists don't have their own statutory register in the UK, so the responsibility sits with you as the provider. Make sure everyone who takes blood has recognised training, has been assessed as competent, and keeps their skills up to date, and keep records of it.

The UK Health Security Agency's Green Book recommends hepatitis B vaccination for healthcare workers who may have direct contact with patients' blood, including anyone at risk of injury from blood-contaminated sharps.[6]

What health and safety rules apply?

The Health and Safety (Sharp Instruments in Healthcare) Regulations 2013 apply to healthcare employers. They ask you to use safer sharps where reasonably practicable, not to recap needles unless your risk assessment requires it, to put disposal containers close to where sharps are used, and to train staff and respond properly when someone is injured.[7]

Used needles and blood-stained items are waste you're responsible for until an authorised carrier takes them. The waste duty of care code explains how to check a carrier is registered, and what records to keep.[8]

What insurance does a clinic need?

In Great Britain, employers' liability insurance is a legal requirement as soon as you employ anyone, with cover of at least £5 million.[9] Most clinics also carry professional indemnity (medical malpractice) and public liability insurance. Talk to a broker who covers healthcare, and tell them exactly what you do, including any home visits.

What data protection steps do I need?

Your clinic is the controller of its patients' data, which includes health data, one of UK GDPR's special categories. Most organisations that handle personal data pay the ICO a data protection fee: since 17 February 2025 it's £52 a year for the smallest organisations and £78 for the next tier.[10]

  • Write a privacy notice patients can read before they book.
  • Check the ICO's guidance on when a data protection impact assessment is required.[11] Many clinics complete one because they handle health data, and Drawn's DPIA template has Drawn's part filled in.
  • Decide how long you keep records, and make sure your systems delete them on time.

How will patients book, pay and get results?

Decide this before you open, because it shapes every day at the clinic. Blood testing has its own booking rules: fasting tests need morning times, home visits need travel time between them, and results need releasing securely once the lab reports. A booking system built for blood testing handles these for you. See how Drawn works for private clinics.

A checklist before your first patient

  1. Registered with the CQC, or your nation's regulator.
  2. A partner laboratory agreed, with its tube types, packing and collection arrangements.
  3. Staff trained and assessed, and hepatitis B vaccination offered.
  4. Sharps containers, a sharps injury procedure, and an authorised waste carrier.
  5. Employers' liability and your other insurance in place.
  6. ICO fee paid, privacy notice written, and data protection risks assessed.
  7. Your test menu, prices, fasting rules and opening hours ready for patients to book.

Sources

  1. [1]Scope of registration: diagnostic and screening procedures, Care Quality Commission
  2. [2]Regulation of independent healthcare, Healthcare Improvement Scotland
  3. [3]Healthcare Inspectorate Wales, Healthcare Inspectorate Wales
  4. [4]Regulation and Quality Improvement Authority, RQIA
  5. [5]ISO 15189: medical laboratories, UKAS
  6. [6]Hepatitis B: the green book, chapter 18, UK Health Security Agency
  7. [7]Health and Safety (Sharp Instruments in Healthcare) Regulations 2013, Health and Safety Executive
  8. [8]Waste duty of care: code of practice, GOV.UK
  9. [9]Employers' Liability (Compulsory Insurance) Act 1969: a guide for employers, Health and Safety Executive
  10. [10]Data protection fee regime: government response, GOV.UK
  11. [11]Data protection impact assessments, Information Commissioner's Office

This guide is general information, not legal or regulatory advice. Rules change, so check with the CQC or your nation's regulator, and take professional advice, before you open. Facts checked 4 November 2026 against the sources listed.

Questions

Questions people ask

Something else? Email director@hizmedia.com and a real person will reply.

Do I need CQC registration to take blood samples?

In England, yes, if the blood is sent to a laboratory for analysis: that's the regulated activity of diagnostic and screening procedures. Finger-prick or venous tests whose samples aren't sent to a lab are excluded.

Do phlebotomists need to be registered?

Phlebotomists don't have their own statutory register in the UK. The provider is responsible for making sure everyone who takes blood is trained and assessed as competent.

How much is the ICO data protection fee?

Since 17 February 2025, it's £52 a year for the smallest organisations (tier 1) and £78 for tier 2.

Do I need my own laboratory?

No. Most private clinics send samples to a partner laboratory. Look for one accredited to ISO 15189, the international standard for medical laboratories.